Title
#macos
clong

clong

10/09/2021, 10:31 PM
hi folks - long time no see. is file integrity monitoring in osquery 5 using the endpoint security framework or is it still using FSEvents?
s

sharvil

10/09/2021, 11:50 PM
It's still using FSEvents
Mike Myers

Mike Myers

10/12/2021, 5:00 PM
Adding Endpoint Security as a new publisher of file events is not currently being worked on, but ought to be relatively easy now